Re: pxe efi boot - bdsdxe boot0002 access denied

Yalan Zhang <yalzhang@xxxxxxxxxx> · Fri, 1 Dec 2023 23:24:04 +0800

Hi Lejeczek,

Please try to disable secure boot with:
<os firmware='efi'>
  <firmware>
    <feature enabled='no' name='secure-boot'/>
  </firmware>
</os>
Refer to https://libvirt.org/kbase/secureboot.html

BR,
Yalan

On Fri, Dec 1, 2023 at 9:49 PM lejeczek via Users <users@xxxxxxxxxxxxxxxxx> wrote:

     Hi guys

        I have VMs which fail to boot with error as per the subject.

        I suspect this is due to:

          <os firmware='efi'>

            <type arch='x86_64'
        machine='pc-q35-rhel9.2.0'>hvm</type>

            <firmware>

              <feature enabled='yes' name='enrolled-keys'/>
        <--- HERE

              <feature enabled='yes' name='secure-boot'/> 
        <---- HERE ?

            </firmware>

            <loader readonly='yes' secure='yes'
type='pflash'>/usr/share/edk2/ovmf/OVMF_CODE.secboot.fd</loader>

            <nvram
template='/usr/share/edk2/ovmf/OVMF_VARS.secboot.fd'>/var/lib/libvirt/qemu/nvram/centos-efi_VARS.fd</nvram>

            <boot dev='network'/>

            <boot dev='hd'/>

          </os>

        Would you have any thoughts on how to fix, to work around it?

        many thanks, L.

_______________________________________________

Users mailing list -- users@xxxxxxxxxxxxxxxxx

To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxx

_______________________________________________
Users mailing list -- users@xxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxx